$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft File: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft (raw, json) Hash identifier: ww2hqtcC1s8xPkwx5JYgbb6ke3QsZYbMm5haTEr7qWg= Subject key identifier: 3C:E6:BD:2B:2A:2C:B4:BF:55:C9:57:E2:41:43:BC:0D:37:A3:3C:AF Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 Certificate issuer: /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05 Certificate serial: B28BAE9B43FC054D3C6A51C6A5461121B9CB2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer Subject info access: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft Manifest number: 0308 Signing time: Mon 03 Nov 2025 05:28:06 +0000 Manifest this update: Mon 03 Nov 2025 05:23:06 +0000 Manifest next update: Tue 04 Nov 2025 05:39:06 +0000 Files and hashes: 1: 323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (hash: Zf5J1vo0exwtyULcPbQWl9oqPv7UiP9VJcKCX094QC8=) 2: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl (hash: lW8+vD+rsmV191T8mI/7bm25cv6gQ5uJujaB7vBZc0I=) 3: 34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (hash: 334eFyhe5qHaD8UdK0Gjl0ftTL+be+I51bBwMtBerMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b2:8b:ae:9b:43:fc:05:4d:3c:6a:51:c6:a5:46:11:21:b9:cb:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05 Validity Not Before: Nov 3 05:23:06 2025 GMT Not After : Nov 4 05:39:06 2025 GMT Subject: CN=3CE6BD2B2A2CB4BF55C957E24143BC0D37A33CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:89:30:b3:ce:91:ba:34:82:fc:7a:d7:9d: 10:0e:4d:f5:85:ef:11:3a:ea:fe:fd:d3:d2:2e:5f: 94:f2:dd:a9:fc:9f:2b:1a:c9:c4:e6:72:b0:22:59: 7d:29:0f:1a:c6:ae:94:23:e4:eb:bd:0e:ed:2c:f3: 7b:be:51:68:b8:c5:14:6c:a8:64:9e:77:79:86:a1: fe:37:71:cf:28:14:b0:c6:11:d1:bc:f9:08:13:2e: a1:20:4a:f3:71:c0:28:b2:2a:28:0f:74:49:c6:7c: 97:2a:ed:87:65:72:a1:77:f7:e3:74:71:95:1c:f0: b1:3e:8d:2b:b5:0a:8e:29:08:e8:ad:c0:02:66:d5: 5e:45:72:5c:91:73:45:04:0d:c8:57:87:67:5c:1e: eb:b0:27:a9:ab:dc:f8:2a:df:92:d5:d5:88:e6:fe: cf:a1:54:1b:61:dc:b9:a4:cf:98:4d:4b:48:8a:b4: 5b:a8:ee:43:07:94:a7:22:61:dc:6c:ab:2c:99:e8: 40:56:2b:73:ff:64:c5:cf:6c:0c:ec:76:de:74:d4: b4:d2:68:8e:b3:bd:92:55:cf:83:66:a6:ba:7d:fd: 43:bc:94:8d:82:d3:37:94:2d:39:39:bd:59:19:47: 44:9e:ae:31:f4:8a:9f:16:a9:37:5f:c8:03:76:42: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:BD:2B:2A:2C:B4:BF:55:C9:57:E2:41:43:BC:0D:37:A3:3C:AF X509v3 Authority Key Identifier: keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:25:33:7f:9f:52:30:10:53:a9:1a:e1:10:d5:29:af:ff:47: 1c:a0:18:ad:56:2a:8f:6d:e4:dc:0f:c7:3c:24:14:36:67:09: 34:30:74:5e:16:6a:fb:60:fa:ad:14:f7:f1:31:45:97:81:41: d8:e8:c4:9a:fd:de:4c:10:c7:fa:54:ce:2a:aa:5d:68:b3:fd: 80:24:a4:38:78:9c:e5:2f:0d:7c:a2:42:74:eb:e9:ce:ce:1a: 70:6f:db:db:90:0e:92:78:5b:cb:e6:e5:33:47:38:e7:f6:97: ed:e2:07:ad:d1:e4:f1:bb:cd:66:40:7b:f8:fb:c6:31:66:df: 18:80:5c:1a:71:37:42:4c:6c:15:67:9b:a8:fa:ec:09:94:66: dd:c5:a9:f9:d7:e5:83:b1:83:0e:9c:ff:46:1c:b3:b0:dc:03: 00:97:19:98:2c:b1:ef:42:8e:81:ec:44:91:32:04:e5:53:1f: ca:b5:70:35:ab:d5:8c:88:c7:62:f1:b1:96:3f:04:78:23:09: 9a:a2:29:c7:6e:38:6a:dc:b0:c4:21:ab:0b:8e:17:bb:c6:0c: 7b:51:83:5e:4d:26:31:98:9c:f1:ab:3d:d2:de:64:f5:79:c3: c0:3e:60:d2:75:7c:3f:7d:ab:c6:8e:18:55:ba:68:78:70:78: 84:98:4c:42 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUALKLrptD/AVNPGpRxqVGESG5yy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RCRUM3NzFGNUIzQjFFMTk1MDkzNDYyM0FFRUM1NTE5 Q0U3MUEwNTAeFw0yNTExMDMwNTIzMDZaFw0yNTExMDQwNTM5MDZaMDMxMTAvBgNV BAMTKDNDRTZCRDJCMkEyQ0I0QkY1NUM5NTdFMjQxNDNCQzBEMzdBMzNDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAYkws86RujSC/HrXnRAOTfWF 7xE66v7909IuX5Ty3an8nysaycTmcrAiWX0pDxrGrpQj5Ou9Du0s83u+UWi4xRRs qGSed3mGof43cc8oFLDGEdG8+QgTLqEgSvNxwCiyKigPdEnGfJcq7YdlcqF39+N0 cZUc8LE+jSu1Co4pCOitwAJm1V5FclyRc0UEDchXh2dcHuuwJ6mr3Pgq35LV1Yjm /s+hVBth3Lmkz5hNS0iKtFuo7kMHlKciYdxsqyyZ6EBWK3P/ZMXPbAzsdt501LTS aI6zvZJVz4Nmprp9/UO8lI2C0zeULTk5vVkZR0SerjH0ip8WqTdfyAN2QkbFAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUPOa9KyostL9VyVfiQUO8DTejPK8wHwYDVR0j BBgwFoAUPb7HcfWzseGVCTRiOu7FUZznGgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xNmdVTm1xSDFjaHF2VEpiZFJDTFVCVHdRYzNKejZwTG1INkZub2VNREJv LzEvM0RCRUM3NzFGNUIzQjFFMTk1MDkzNDYyM0FFRUM1NTE5Q0U3MUEwNS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREJFQzc3MUY1QjNCMUUxOTUw OTM0NjIzQUVFQzU1MTlDRTcxQTA1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3E2 Z1VObXFIMWNocXZUSmJkUkNMVUJUd1FjM0p6NnBMbUg2Rm5vZU1EQm8vMS8zREJF Qzc3MUY1QjNCMUUxOTUwOTM0NjIzQUVFQzU1MTlDRTcxQTA1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA diUzf59SMBBTqRrhENUpr/9HHKAYrVYqj23k3A/HPCQUNmcJNDB0XhZq+2D6rRT3 8TFFl4FB2OjEmv3eTBDH+lTOKqpdaLP9gCSkOHic5S8NfKJCdOvpzs4acG/b25AO knhby+blM0c45/aX7eIHrdHk8bvNZkB7+PvGMWbfGIBcGnE3QkxsFWebqPrsCZRm 3cWp+dflg7GDDpz/RhyzsNwDAJcZmCyx70KOgexEkTIE5VMfyrVwNavVjIjHYvGx lj8EeCMJmqIpx244atywxCGrC44Xu8YMe1GDXk0mMZic8as90t5k9XnDwD5g0nV8 P32rxo4YVbpoeHB4hJhMQg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:33:48 2025 by rpki-client